I appreciate your blog updates, Dave. My main point of frustration is that we had a supported 2007 installation with AL segregation, and 2010 was released with no indication on the team blog (or any other that I have been able to find) that ugprading such a supported scenario to 2010 was in any way problematic or unsupported. We were one of the first to upgrade, and actually the upgrade went smoothly and we have not experienced any issues, however we also have not had occasion to set up a new hosted division since moving to 2010.
As we eagerly await the whitepaper, I am curious what you suggest following the 4 steps under "your only option to fix this" in your blog post would be -- could one remove the permissions readded once the update has been run? If not, then everyone is open to read the default GAL, correct?
thanks,
Wes